This page explains what happens to personal data on falsmount.com, as required by Articles 13 and 14 of the GDPR. It is short because the site does very little: it shows a product and it takes one optional email address, described below.

Who is responsible

The controller is OÜ MARTOSE HOLDING, Pelguranna tn 59-28, 10316 Tallinn,Estonia (registry code 10888736). Questions about your data go tohello@falsmount.com. We have not appointed a data protection officer — we are not required to.

The order pages

The product pages let you pick a size and quantity — and for the XL, the seam step it would be built to — and go to a checkout. The checkout asks for an email address and a delivery country, and nothing else: no name, no address, no payment details.

What you type on that checkout screen is not sent to us and not stored. It stays in your browser and is used only to fill in the notification form on the next screen. If you close the page there, we have received nothing and we have no way to contact you.

• If — and only if — you then click “Tell me when it ships”: we receive youremail address, the delivery country you picked, which size and quantity you chose, and the seam step if you entered one. That click is the consent; reaching the checkout is not.
• Why: to email you once about that order, and to understand which sizes, seam steps and markets people actually want.
• Legal basis: your consent, Art. 6(1)(a) GDPR.
• How long: until we send that email, or until you ask us to delete it, whichever comes first. Seam measurements may be kept longer in aggregate form that no longer identifies you.
• Withdrawing: reply to any email from us, or write tohello@falsmount.com. Withdrawal does not affect processing that already happened.

Submissions are handled by Netlify, which stores them on our behalf. We do not sell, rent or share this list. Separately, if you have accepted analytics, we record that a checkout could not be completed, along with the size, quantity, seam step and country. That record carries no email address and is not linked to the one you may have typed.

Server logs

Our host records ordinary access data — IP address, time, the page requested, browser and referrer — to serve the site and defend it against abuse. Legal basis: our legitimate interest in operating a secure website, Art. 6(1)(f) GDPR. These logs are short-lived and we do not use them to build profiles.

Analytics — off unless you say otherwise

We would like to use Google Analytics 4 to count visits and see which parts of the page people read. It is not loaded until you accept it. If you decline, or simply ignore the banner, no Google script is requested, no analytics cookies are set and nothing is sent to Google. Legal basis when you do accept: consent, Art. 6(1)(a) GDPR and the corresponding national ePrivacy rules.

Change my analytics choice

Fonts and other content

Typefaces are served from our own domain, not from Google Fonts, so viewing the site does not disclose your IP address to a font provider. The 3D model viewer is also served from our own domain. There are no social media buttons, advertising pixels or embedded third-party trackers on this site.

Who else sees your data

Where these providers process data outside the EU, they do so under the European Commission's adequacy decision for the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Your rights

Under the GDPR you can ask us for a copy of your data (Art. 15), to correct it (Art. 16), to delete it (Art. 17), to restrict how we use it (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you can withdraw it at any time. Write tohello@falsmount.com — we do not charge for this and we will answer within a month.

You can also complain to a supervisory authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). If you live elsewhere in the EU you may instead complain to the authority for your own country or region.